Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: OZg/wvX9Z6PAP3p6dkcxhZuRgxv3S01q2QcXIyZsqGQ=
Subject key identifier: 96:BB:81:CF:D7:37:1C:B8:72:B0:6C:D8:65:8C:DA:30:F2:08:F9:DA
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 019F92B610020C7EDC6840D5A57A94D5DC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 06:00:32 +0000
Manifest this update: Fri 24 Jul 2026 06:00:32 +0000
Manifest next update: Sat 25 Jul 2026 06:00:32 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: Zav8Be3A9jZA83ROxtj5VDZsvY6K78zfLcyUNy1/Vt4=)
2: FtpP7jqiRqsaewteqUCm2wyEXLM.roa (hash: MK0f39W8byL9gsiBPX02BzYZlhRpLBc93Ceao7rPOjg=)
3: a7W4vQeQw0IYd5G5T60uWMaPKGs.roa (hash: tRWFQQI0YZC0M7nzgTovhHQ6mNNC+raBd4UmVBuNPyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:10:02:0c:7e:dc:68:40:d5:a5:7a:94:d5:dc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Jul 24 06:00:32 2026 GMT
Not After : Jul 25 06:00:32 2026 GMT
Subject: CN=96bb81cfd7371cb872b06cd8658cda30f208f9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:fb:b6:38:04:cf:f4:d2:59:e0:bd:02:bd:
21:7c:f1:ee:94:6f:af:5e:a4:9d:63:93:c3:9d:79:
63:31:bb:09:83:38:08:8d:4c:7f:a3:7d:0b:05:8c:
06:e6:97:6a:13:f2:91:7e:a5:3b:5b:68:63:6e:08:
73:b5:34:79:ae:9b:9f:77:5f:35:f4:da:24:f1:e0:
6e:bf:cf:9a:a4:68:42:de:18:96:bb:bf:57:3a:c5:
a8:02:08:ee:12:dd:de:02:59:71:88:05:62:5b:5e:
bc:b0:36:54:fe:da:a2:b3:6a:01:aa:3b:b2:94:85:
da:4a:1e:3d:6b:18:c8:10:cb:10:ad:83:9c:40:6e:
02:0e:bf:00:d4:b8:9d:b0:79:c8:1e:c6:ad:5d:d8:
96:a5:44:00:fc:98:ec:d8:5a:f2:01:83:f8:82:f3:
f0:da:4b:a1:12:24:92:ff:84:5b:9a:9a:bd:2b:6d:
42:6a:26:47:08:c7:29:9b:fa:fb:25:58:d5:52:39:
17:0c:87:aa:9d:b1:8c:c5:16:7e:dc:20:28:0c:bb:
63:fc:ea:f4:71:0e:4f:b5:f9:3a:d4:38:4d:08:d9:
ce:26:2e:c9:ca:74:2d:1f:bf:b2:f4:78:84:15:18:
47:81:0b:93:75:f9:a0:6d:07:a1:13:17:f7:9e:6e:
41:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BB:81:CF:D7:37:1C:B8:72:B0:6C:D8:65:8C:DA:30:F2:08:F9:DA
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:23:40:43:24:62:b2:4f:d6:a6:97:e2:bf:35:0b:99:bc:b1:
7c:ab:ea:f6:ff:8e:26:19:a8:23:34:a7:b4:d0:ec:68:8e:bb:
1a:f4:a1:89:21:f7:6f:12:32:f0:fc:8c:7d:81:34:38:d6:ec:
8b:a9:d0:fe:66:e9:e9:d2:b4:4d:c0:c0:3d:5e:cf:fc:8d:18:
0d:01:dc:4b:70:0d:28:7a:08:fe:f8:ee:20:09:e3:dc:87:ae:
98:d1:54:dc:97:01:25:b6:c2:b0:68:29:c1:a4:b1:63:ed:a3:
29:28:23:3d:7b:64:60:ea:53:09:b7:5a:26:b9:d2:ae:7e:3e:
43:ff:5e:f1:b1:ce:70:b0:bc:db:ad:6d:5d:9e:f2:25:78:0d:
9f:d4:c4:2c:69:8d:0b:e0:26:34:e6:cf:7c:90:11:b2:aa:6b:
a5:4c:6e:bd:d3:89:78:57:93:70:d1:b7:0a:b9:4f:a3:f2:87:
cd:39:a3:72:8a:28:f6:8a:eb:94:f1:45:13:ee:7e:75:28:22:
c8:45:15:9a:d4:70:da:14:c1:f4:af:6f:de:7c:d9:c1:fa:78:
8c:95:a4:ab:ff:6a:07:1b:99:11:c3:e5:af:3d:ff:06:d9:86:
cd:a3:41:7d:e3:18:11:b6:e9:34:c5:1a:54:b2:39:93:16:1e:
a9:a0:1f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:35:03 2026 by rpki-client